Release vfox 2026.6.15

- **(bootstrap)** add --only flag by @jdx in [#10607](#10607)

- **(bootstrap)** add brew package import and prune by @jdx in [#10606](#10606)
- **(bootstrap)** add aggregate status by @jdx in [#10608](#10608)
- **(bootstrap)** summarize follow-up actions by @jdx in [#10609](#10609)
- **(bootstrap)** add shell activation setup by @jdx in [#10610](#10610)
- **(bootstrap)** add repo checkout by @jdx in [#10611](#10611)
- **(bootstrap)** align cli with config sections by @jdx in [#10613](#10613)

- **(backend)** add riscv64/loongarch64 archs, patterns by @elerch in [#10506](#10506)
- **(bootstrap)** include shell activation in aggregate status by @jdx in [#10612](#10612)
- **(brew)** support binary cask artifacts by @jdx in [#10604](#10604)
- **(completions)** deduplicate plugin names in shell completion by @zeitlinger in [#10351](#10351)
- **(config)** target nearest config dir for TOML writes by @jdx in [#10603](#10603)
- **(config)** avoid idiomatic version file write panic by @jdx in [#10602](#10602)
- **(config)** treat symlinked global config paths as global by @JamBalaya56562 in [#10597](#10597)
- **(github)** return error instead of panic on invalid request url by @risu729 in [#10591](#10591)
- **(hook-env)** suppress repeated untrusted config warnings by @jdx in [#10589](#10589)
- **(settings)** hide empty parent table for nested settings by @jdx in [#10605](#10605)
- **(sigstore)** apply url_replacements to Sigstore TUF root fetch by @JamBalaya56562 in [#10596](#10596)
- **(which)** respect prefer_offline so binary lookup avoids remote fetches by @JamBalaya56562 in [#10595](#10595)

- add mise song page by @jdx in [#10614](#10614)

- @elerch made their first contribution in [#10506](#10506)

Release mise-sigstore 2026.6.2

Release vfox 2026.6.14

- **(bootstrap)** support brew cask pkg artifacts by @jdx in [#10587](#…

…10587)

- **(aqua)** allow verified checksum algorithm upgrades by @jdx in [#10569](#10569)
- **(aqua)** don't cache transient filesystem state in list_bin_paths by @devnulled in [#10559](#10559)
- **(aqua)** require config for attestation badge by @jdx in [#10588](#10588)
- **(file)** support Windows plugin symlinks for UNC paths by @rozsazoltan in [#10566](#10566)
- **(gem)** opt out of --locked URL check by @itochan in [#10578](#10578)
- **(lock)** fail when active tools cannot resolve by @jdx in [#10586](#10586)
- **(node)** suppress npm update notices by @risu729 in [#10557](#10557)
- **(node)** save source lock outcomes by @risu729 in [#10547](#10547)
- **(oci)** write long symlink targets via GNU @LongLink extension by @JamBalaya56562 in [#10519](#10519)
- **(sigstore)** retry transient GitHub attestation API failures by @afreyermuth98 in [#10482](#10482)
- **(swift)** opt out of --locked URL check by @AllDmeat in [#10575](#10575)
- **(task)** avoid remote resolution during task startup by @jdx in [#10571](#10571)

- lock file maintenance lockfile maintenance by @renovate[bot] in [#10560](#10560)
- In a pub workspace, look for package config in workspace root by @tjarvstrand in [#10521](#10521)

- add checksums for http-backend tools by @itochan in [#10552](#10552)
- add lore by @ggoggam in [#10558](#10558)

- @afreyermuth98 made their first contribution in [#10482](#10482)
- @AllDmeat made their first contribution in [#10575](#10575)
- @rozsazoltan made their first contribution in [#10566](#10566)

Release mise-sigstore 2026.6.1

Release vfox 2026.6.13

- **(bootstrap)** add skip controls by @jdx in [#10497](#10497)

- **(http)** resolve cross-platform lock checksums from published metadata by @itochan in [#10509](#10509)
- **(upgrade)** fix tool removal when minimum_release_age is set by @roele in [#10466](#10466)

- **(aqua)** support checksum verification fields by @risu729 in [#10473](#10473)
- **(backend)** resolve dependency executables on Windows by @risu729 in [#10514](#10514)
- **(bootstrap)** detect systemd user manager socket by @jdx in [#10550](#10550)
- **(env)** expand escaped dollar in env shell expansion by @jdx in [#10511](#10511)
- **(install)** rebuild symlinks after partial installs by @risu729 in [#10470](#10470)
- **(npm)** warn when system pnpm/bun may not support minimum_release_age by @risu729 in [#10491](#10491)
- **(pipx)** upgrade shared pip for release age installs by @risu729 in [#10472](#10472)
- **(pipx)** warn for unsupported uv exclude-newer by @risu729 in [#10510](#10510)
- **(pipx)** force pip backend for mise pipx subprocess calls by @risu729 in [#10513](#10513)
- **(system)** drop bare -- from dnf argv (breaks DNF5 install/upgrade) by @spencergilbert in [#10538](#10538)
- **(task)** align duplicate config task precedence by @risu729 in [#10471](#10471)
- **(task)** skip mise configs in task include dirs by @jdx in [#10500](#10500)
- **(task)** error on empty task shell by @jdx in [#10517](#10517)
- **(task)** honor show_full_cmd in the task command header by @JamBalaya56562 in [#10518](#10518)
- **(vfox)** resolve tools=true env path templates against the dependency toolset by @JamBalaya56562 in [#10481](#10481)

- **(dotfiles)** make self-managing config first-run safe by @jdx in [#10494](#10494)
- **(env)** remove emoji checkboxes by @jdx in [#10504](#10504)
- recommend keeping mise current by @jdx in [#10505](#10505)

- bump usage to 3.5.2 by @jdx in [#10498](#10498)
- update ghcr.io/jdx/mise:rpm docker digest to b5e0574 by @renovate[bot] in [#10531](#10531)
- update ghcr.io/jdx/mise:alpine docker digest to 892c324 by @renovate[bot] in [#10529](#10529)
- update jdx/mise-action digest to e6a8b39 by @renovate[bot] in [#10532](#10532)
- update rust docker digest to c681116 by @renovate[bot] in [#10533](#10533)
- update ubuntu:26.04 docker digest to e153663 by @renovate[bot] in [#10534](#10534)
- update ghcr.io/jdx/mise:deb docker digest to 3d636fa by @renovate[bot] in [#10530](#10530)
- update dependency esbuild to v0.28.1 by @renovate[bot] in [#10535](#10535)
- update ubuntu:26.04 docker digest to 53958ec by @renovate[bot] in [#10539](#10539)

- add aspire ([github:microsoft/aspire](https://github.com/microsoft/aspire)) by @davidfowl in [#10520](#10520)
- add nub by @colinhacks in [#10544](#10544)
- add ldc ([github:ldc-developers/ldc](https://github.com/ldc-developers/ldc)) by @slbls in [#10527](#10527)
- relax checkov test by @jdx in [#10548](#10548)

- @spencergilbert made their first contribution in [#10538](#10538)
- @slbls made their first contribution in [#10527](#10527)
- @colinhacks made their first contribution in [#10544](#10544)
- @davidfowl made their first contribution in [#10520](#10520)

Release aqua-registry 2026.6.6

Release vfox 2026.6.12